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DETAILED ACTION 

1 . This office action is in reply to an amendment filed on May 14 
have been amended. 

2. Claims 1-22 and 29 are canceled. 

3. Claims 23-28 and 30-42 are pending. 

Response to Amendment 

4. Applicant's arguments with respect to claims 23-28 and 30-42 have been considered but are 
moot in view of the new ground(s) of rejection. 

Claim Objections 

5. Claim 39 is objected to because of the following informalities: the word "thee" should be "the". 
Appropriate correction is required. 

Claim Rejections - 35 USC § 103 

6. The following is a quotation of 35 U S C. 103(a) which forms the basis for all obviousness 
rejections set forth in this Office action: 

(a) A patent may not be obtained though the invention is not identicall} disclosed or described as set forth in section 
1 02 of this title, if the differences between the subject matter sought to be patented and the prior art are such that the 
subject matter as a whole would have been obvious at the time the invention was made to a person having ordinary skill 
in the art to which said subject matter pertains. Patentability shall not be negatived by the manner in which the 
invention was made. 

7. Claims 23-28 and 30-42 are rejected under 35 U.S.C. 103(a) as being unpatentable over Gaskins 
et al (Gaskins), US 5,606,315, in view of Hale, US 5,355,414. 

As per claim 23 Gaskins discloses: 

A security system for an electronic device having a memory, the security system comprising: a 
means arranged to interact with the electronic device to acquire at least a portion of the memory of the 
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electronic device; (column 1, line 5-7, the invention relates to a method of operating an electronic control 
module and particularly to a method of securing protected data stored in such a module) and (column 3, 
line 32-35, the ROM 16 also contains security logic which is used to prevent unauthorized access to 
sensitive data stored in the EEPROM 20. The EEPROM has an address for a password, and addresses 
for sensitive data, particularly calibration parameters, as well as addresses for non-sensitive data). 

An access system arranged to control access to the acquired memory independently of an 
operating system of the electronic device; (abstract, line 1-5, a microprocessor based electronic control 
module with an EEPROM for storing protected data allows the data to be used internally, and allows non- 
sensitive data to be accessed by external communication tools, but prohibits access to the protected data 
unless a password is first entered). 

A filter driver configured to intercept read/write operations to the memory of the electronic device 
and interact with the acquired portion of the memory based on the intercepted read/write operations 
independent of the operating system. (Column 3, line 48-65, the messages are routed to the security logic 
program which filters the messages, passing those dealing with non-sensitive data, and evaluating 
whether other messages should be honored). 

Gaskins fails to teach the system of intercepting read/write operations to the memory and 
acquiring memory independently of an operating system of the electronic device. However, in the same 
field of endeavor, Hale teaches this limitation as, (column 2, line21-28, the security measures generally 
involve the keyboard controller preventing transfer of any data to the host computer from the peripheral 
input devices connected to the keyboard controller. In other words, while security is active, the keyboard 
controller does not allow any transfers to the host computer via the keyboard controller) and (column 7, 
line 30-35, the security system instructions to carry out the operations illustrated in the flowcharts are 
stored in the memory 220 and executed by the keyboard controller 120, independent of the host 
operating system). 

Therefore, it would have been obvious to one of ordinary skill in the art, at the time of the 
invention was made, to modify the teaching of Gaskins and include the system of intercepting read/write 
operations to the memory and acquiring memory independently of an operating system of the electronic 
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device using the teaching of Hale in order to secure the system by making the memory virtually 
inaccessible to the device operating system (see column 2, line 55-63). 

Claims 34 and 42 are rejected under the same reason set forth in rejection of claim 23: 

As per claim 24 Gaskins in view of Hale discloses: 

A system as claimed in claim 23, wherein the means arranged to interact with the electronic 
device is arranged to interact directly with the operating system, (column 1 , line 5-7, This invention relates 
to a method of operating an electronic control module and particularly to a method of securing protected 
data stored in such a module) and (column 3, line 25-32, The microprocessor unit (MPU) communicates 
with the rest of the system by an 8 bit bi-directional data bus). 

Claim 35 is rejected under the same reason set forth in rejection of claim 24: 

As per claim 25 Gaskins in view of Hale discloses: 

A system as claimed in claim 23, wherein the means arranged to interact with the electronic 
device is arranged to interact with a memory management unit of the device. (Column 3, line 38-43, the 
EEPROM has an address for a password, and addresses for sensitive data, particularly calibration 
parameters, as well as addresses for non-sensitive data. The RAM 18 temporarily stores data which may 
be read from various locations determined in accord with the program stored in the ROM). 

Claim 36 is rejected under the same reason set forth in rejection of claim 25: 

As per claim 26 Gaskins in view of Hale discloses: 

A system as claimed in any claim 25, wherein the memory management system is manipulated 
to remove references to the acquired memory. (Abstract, 11-15, when a password can not be found and it 
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is necessary to change the protected data, the unit can be recovered by a recover procedure wherein the 
secure data is first erased and then the security is deactivated to grant free access). 

Claim 37 is rejected under the same reason set forth in rejection of claim 26: 

As per claim 27 Gaskins in view of Hale discloses: 

A system as claimed in claim 25, wherein the access system is arranged to control access to at 
least selected registers of the memory management unit. (Abstract, line 1-7, a microprocessor based 
electronic control module with an EEPROM for storing protected data allows the data to be used 
internally, and allows non-sensitive data to be accessed by external communication tools, but prohibits 
access to the protected data unless a password is first entered). 

Claim 38 is rejected under the same reason set forth in rejection of claim 27: 

As per claim 28 Gaskins in view of Hale discloses: 

A system as claimed in claim 23, wherein the acquired memory is hidden from the operating 
system, (abstract, line 1-5, a microprocessor based electronic control module with an EEPROM for 
storing protected data allows the data to be used internally, and allows non-sensitive data to be accessed 
by external communication tools, but prohibits access to the protected data unless a password is first 
entered). 

Gaskins fails to teach the system of acquiring memory independently of an operation system of 
the electronic device. However, in the same field of endeavor, Hale teaches this limitation as, (column 7, 
line 30-35, the security system instructions to carry out the operations illustrated in the flowcharts are 
stored in the memory 220 and executed by the keyboard controller 120, independent of the host 
operating system). 

Therefore, it would have been obvious to one of ordinary skill in the art, at the time of the 
invention was made, to modify the teaching of Gaskins and include the system of acquiring memory 
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independently of an operating system using the teaching of Hale in order to secure the system by making 
the memory virtually inaccessible to the device operating system (see column 2, line 55-63). 

Claim 39 is rejected under the same reason set forth in rejection of claim 28: 

As per claim 30 Gaskins in view of Hale discloses: 

A system as claimed in claim 23, wherein the electronic device comprises a selected one of a 
personal digital assistant (PDAs), a mobile telephone and a laptop. (Abstract, line 1-7, microprocessor 
based electronic control module with an EEPROM for storing protected data allows the data to be used 
internally). 

As per claim 31 Gaskins in view of Hale discloses: 

A system as claimed in claim 23, wherein the access system is arranged to protect at least 
selected registry settings associated with the acquired memory such that they cannot be modified by 
other applications. (Column 1 , line 5-8, the invention relates to a method of operating an electronic control 
module and particularly to a method of securing protected data stored in such a module). 

Claims 32, 40 and 41 are rejected under the same reason set forth in rejection of claim 31 : 

As per claim 33 Gaskins in view of Hale discloses: 

A system, as claimed in claim 23, wherein the memory acquired, is used to store the 
encryption/decryption key or keys of the encryption system. (Abstract, line 5-9, the data may be read from 
memory and the data or the password may then be changed. For a given model of control module, an ID 
number is assigned to the password and stored in the module). 
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Conclusion 

8. The prior art made or record and not relied upon is considered pertinent to applicant's disclosure. 
TITLE: Security, storage and communication system, US Pub. No. 2007/0271596. 

9. Applicant's amendment necessitated the new ground(s) of rejection presented in this Office 
action. Accordingly, THIS ACTION IS MADE FINAL. See MPEP § 706.07(a). Applicant is reminded of 
the extension of time policy as set forth in 37 CFR 1.136(a). 

A shortened statutory period for reply to this final action is set to expire THREE MONTHS from 
the mailing date of this action. In the event a first reply is filed within TWO MONTHS of the mailing date 
of this final action and the advisory action is not mailed until after the end of the THREE-MONTH 
shortened statutory period, then the shortened statutory period will expire on the date the advisory action 
is mailed, and any extension fee pursuant to 37 CFR 1.136(a) will be calculated from the mailing date of 
the advisory action. In no event, however, will the statutory period for reply expire later than SIX 
MONTHS from the date of this final action. 

Any inquiry concerning this communication or earlier communications from the examiner should 
be directed to TESHOME HAILU whose telephone number is (571 )270-3159. The examiner can normally 
be reached on Mon-Fri 7:30a.m. to 5:00p.m. PST. 

If attempts to reach the examiner by telephone are unsuccessful, the examiner's supervisor, 
Kristine L. Kincaid can be reached on (571) 272-4063. The fax phone number for the organization where 
this application or proceeding is assigned is 571-273-8300. 
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Information regarding the status of an application may be obtained from the Patent Application 
Information Retrieval (PAIR) system. Status information for published applications may be obtained from 
either Private PAIR or Public PAIR. Status information for unpublished applications is available through 
Private PAIR only. For more information about the PAIR system, see http://pair-direct.uspto.gov. Should 
you have questions on access to the Private PAIR system, contact the Electronic Business Center (EBC) 
at 866-217-9197 (toll-free). If you would like assistance from a USPTO Customer Service Representative 
or access to the automated information system, call 800-786-9199 (IN USA OR CANADA) or 571-272- 
1000. 



Teshome Hailu 
September 5, 2008 



/Kristine Kincaid/ 

Supervisory Patent Examiner, Art Unit 
2139 



